// tag
cPanel
Security incidents tagged cPanel. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 cPanel incident in the last 12 months
crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
April 2026 1
highWebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerabilitypatched
› WebPros cPanel & WHM and WP2 (WordPress Squared) patched
WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. Added to CISA KEV on 2026-04-30.
open incident →CVE-2026-41940
